Nit picking, but you could keep the result of `signedXml.SignedInfo.References.Cast<Reference>().Single()` a couple of lines above in a variable to avoid a cast and make it clearer that both the Url validation and TransformCain validation operates on the same reference.